deauthentication
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
deauthentication [2008/07/13 23:43] – typo mister_x | deauthentication [2009/08/14 17:40] – typo mister_x | ||
---|---|---|---|
Line 8: | Line 8: | ||
* Generate ARP requests (Windows clients sometimes flush their ARP cache when disconnected) | * Generate ARP requests (Windows clients sometimes flush their ARP cache when disconnected) | ||
- | Of course, this attack is totally useless if there are no associated wireless client or on a fake authentications. | + | Of course, this attack is totally useless if there are no associated wireless client or on fake authentications. |
===== Usage ===== | ===== Usage ===== | ||
Line 30: | Line 30: | ||
Where: | Where: | ||
* -0 means deauthentication | * -0 means deauthentication | ||
- | * 1 is the number of deauths to send (you can send muliple | + | * 1 is the number of deauths to send (you can send multiple |
* -a 00: | * -a 00: | ||
* -c 00: | * -c 00: | ||
Line 81: | Line 81: | ||
After sending the ten batches of deauthentication packets, we start listening for ARP requests with attack 3. The -h option is mandatory and has to be the MAC address of an associated client. | After sending the ten batches of deauthentication packets, we start listening for ARP requests with attack 3. The -h option is mandatory and has to be the MAC address of an associated client. | ||
- | If the driver is [[http:// | + | If the driver is [[http:// |
===== Usage Tips ===== | ===== Usage Tips ===== | ||
Line 106: | Line 106: | ||
See the general aireplay-ng troubleshooting ideas: [[aireplay-ng# | See the general aireplay-ng troubleshooting ideas: [[aireplay-ng# | ||
+ | |||
+ | ===== Release Candidate or SVN Version Notes ===== | ||
+ | |||
+ | This section ONLY applies the latest SVN version and to some release candidate versions of the aircrack-ng suite. | ||
+ | |||
+ | For directed deauthentications, | ||
+ | |||
+ | Here is a typical command: | ||
+ | |||
+ | aireplay-ng -0 1 -a 00: | ||
+ | |||
+ | Here is typical output: | ||
+ | |||
+ | | ||
+ | | ||
+ | |||
+ | Here is what the "[ 61|63 ACKs]" means: | ||
+ | |||
+ | * [ ACKs received from the client | ACKs received from the AP ] | ||
+ | * You will notice that the number in the example above is lower then 64 which is the number of packets sent. It is not unusual to lose a few packets. | ||
+ | * How do you use this information? | ||
+ |
deauthentication.txt · Last modified: 2010/11/21 13:34 by sleek